7.0
High
CVE-2026-20985 Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL…
Description
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Members 5.6 | earliest → < 5.6.00.11 | 5.6.00.11 |
Other CVEs of Samsung Members
The 14 CVEs of Samsung Members →
CVE-2026-21037
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL…
6.9
Medium
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary…
7.1
High
CVE-2025-20949
Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write…
5.1
Medium
CVE-2025-20898
Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data…
4.6
Medium